View on GitHub

DNSViz: A DNS visualization tool

imirhil.fr

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
  8. |?|
  9. |?|
  10. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Bogus (6)
  • imirhil.fr/A
  • imirhil.fr/AAAA
  • imirhil.fr/MX
  • imirhil.fr/NS
  • imirhil.fr/SOA
  • imirhil.fr/TXT

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Bogus (4)
  • imirhil.fr/DNSKEY (alg 13, id 48584)
  • imirhil.fr/DNSKEY (alg 13, id 59608)
  • imirhil.fr/DNSKEY (alg 15, id 12680)
  • imirhil.fr/DNSKEY (alg 15, id 57828)
Secure (9)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 46594)
  • ./DNSKEY (alg 8, id 48903)
  • fr/DNSKEY (alg 8, id 29173)
  • fr/DNSKEY (alg 8, id 35095)
  • fr/DNSKEY (alg 8, id 3816)
  • fr/DS (alg 8, id 35095)
  • imirhil.fr/DS (alg 13, id 59608)
  • imirhil.fr/DS (alg 15, id 57828)

Delegation statusDelegation status

Bogus (1)
  • fr to imirhil.fr
Secure (1)
  • . to fr

NoticesNotices

Errors (27)
  • RRSIG imirhil.fr/A alg 13, id 48584: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/A alg 15, id 12680: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/AAAA alg 13, id 48584: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/AAAA alg 15, id 12680: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/DNSKEY alg 13, id 59608: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/DNSKEY alg 13, id 59608: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/DNSKEY alg 13, id 59608: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/DNSKEY alg 13, id 59608: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/DNSKEY alg 15, id 57828: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/DNSKEY alg 15, id 57828: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/DNSKEY alg 15, id 57828: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/DNSKEY alg 15, id 57828: The Signature Expiration field of the RRSIG RR (2019-12-08 15:47:46+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/MX alg 13, id 48584: The Signature Expiration field of the RRSIG RR (2019-12-06 10:01:34+00:00) is 211 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/MX alg 15, id 12680: The Signature Expiration field of the RRSIG RR (2019-12-06 10:01:34+00:00) is 211 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/NS alg 13, id 48584: The Signature Expiration field of the RRSIG RR (2019-12-08 14:52:23+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/NS alg 15, id 12680: The Signature Expiration field of the RRSIG RR (2019-12-08 14:52:23+00:00) is 208 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/SOA alg 13, id 48584: The Signature Expiration field of the RRSIG RR (2019-12-13 07:35:59+00:00) is 204 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/SOA alg 15, id 12680: The Signature Expiration field of the RRSIG RR (2019-12-13 07:35:59+00:00) is 204 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/TXT alg 13, id 48584: The Signature Expiration field of the RRSIG RR (2019-12-11 16:48:21+00:00) is 205 days in the past. See RFC 4035, Sec. 5.3.1.
  • RRSIG imirhil.fr/TXT alg 15, id 12680: The Signature Expiration field of the RRSIG RR (2019-12-11 16:48:21+00:00) is 205 days in the past. See RFC 4035, Sec. 5.3.1.
  • fr to imirhil.fr: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (51.159.53.89, 2001:bc8:1200:4:208:a2ff:fe0c:67ea, UDP_-_EDNS0_4096_D_K)
  • imirhil.fr zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (82.64.102.215, 2a01:e0a:23a:5600::3)
  • imirhil.fr/A: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (82.64.102.215, 2a01:e0a:23a:5600::3, UDP_-_NOEDNS_)
  • imirhil.fr/NS: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (82.64.102.215, 2a01:e0a:23a:5600::3, UDP_-_NOEDNS_)
  • hwtsui4bz8.imirhil.fr/A has errors; select the "Denial of existence" DNSSEC option to see them.
  • imirhil.fr/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
  • imirhil.fr/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph